Leonard Moustacchis

💉"Cato really is the antidote to security complexity" 💉 CRN vient de dévoiler son top 10 des solutions de cyber sécurité du moment. Spoiler alert : le XDR de Cato en fait partie 🔥 👉 https://okt.to/TpfDxL #CatoXDR #CatoNetworks #SASE ---------- According CRN, Cato XDR is one of "The 10 Hottest Cybersecurity Tools And Products Of 2024 (So Far)". 🔥 Cato XDR further extends the Cato SASE Cloud Platform into threat detection and response. Learn more 👉 https://okt.to/CRIqdD #CatoXDR #CatoNetworks #SASE

2

Did your authentication secrets leak from the public cloud ? Knowing what you have is key, when comes the time to assess the impact of such cloud issue. "Bitbucket artifact files can leak plaintext authentication secrets" From the article : ➡ Bitbucket was not designed to manage secrets, suggesting that a dedicated, specialized product is used for that purpose instead. ➡ Developers are also recommended to carefully review artifacts to ensure no plain text secrets are contained inside the generated files. and more good info in the linked article #cybersecurity #leakdetection #governance #dataclassification #cloud https://lnkd.in/ePVJnzTX

5

𝐁𝐫𝐞𝐚𝐤𝐭𝐡𝐫𝐨𝐮𝐠𝐡 𝐦𝐨𝐦𝐞𝐧𝐭𝐮𝐦 𝐟𝐨𝐫 𝐎𝐧𝐞𝐓𝐫𝐮𝐬𝐭: It's been an exciting year so far for OneTrust, and we're proud to share some significant milestones that are propelling us to new heights: 📈 𝐑𝐞𝐬𝐮𝐥𝐭𝐬: Thanks to strong demand, we expect to surpass $500m in ARR later this year 🌏 𝐈𝐦����𝐚𝐜𝐭: OneTrust empowers 1.3 billion daily website visitors to maintain their privacy preferences 💡 𝐈𝐧𝐧𝐨𝐯𝐚𝐭𝐢𝐨𝐧: Launching Compliance Automation, new AI Governance enhancements, and more 🤝 𝐏𝐚𝐫𝐭𝐧𝐞𝐫𝐬𝐡𝐢𝐩𝐬: With groundbreaking companies like Adobe 🏆 𝐑𝐞𝐜𝐨𝐠𝐧𝐢𝐭𝐢𝐨𝐧: Prestigious awards and industry analyst recognition for our privacy, compliance, and data governance solutions Thank you to our dedicated team, supportive partners, and valued customers. We look forward to seeing you at #TrustWeek this week! Learn more: https://lnkd.in/eJA7bW8p #ResponsibleAI #Data

4

It makes no surprise that SaaS CyberSecurity attacks aim to exploit your credentials to get access to your SaaS environment, either to use ressources or to steal some data. Using SaaS doesn't mean that you are 100% safe because the security is managed by your SaaS provider. You still have to strengthen your authentication credentials, and also double check the network connectivity. Here is an interesting article covering SaaS security threats and how to mitigate them. Good to read and keep that in mind, and then ensure a proper identity management and controlled access management... 😊 https://lnkd.in/exBzTbCn #saas #cybersecurity

5

Watch our latest on-demand webinar with Edward Young and Julien Rodrigues Roque : Sharing Threat Intelligence. ThreatQ's flexible data model and centralized control allows you to share data in a plethora of ways. Learn the benefits by watching on-demand now.

6

Stressed about your upcoming meeting with a CISO ? Struggling to find the right subjects to cover during the meeting ? How about the evolution of the Cyber Security strategy to cover Artificial Intelligence ? Two complementary approaches need to be considered: 1) Secure the AI initiatives of the business lines 2) AI part of the Cyber Security strategy Although AI based security tools are still to come, a first step can be implemented today : employee training. Read more about this in the following article from SecurityInfoWatch here : https://lnkd.in/eHVTNtrS. #cybersecurity #ai #ciso

7

‼️Customers are looking for consolidation to get more security, less complexity and less costs ==> CrowdStrike can help with the Falcon Platform !! ‼️Customers need strong security expertise and solid trust advisors ==> CrowdStrike has the best partner ecosystem to help customers 💪💪 Daniel Bernard explaining how we can help our customers in this journey at Europe partner symposium 🚨

114

1 Comment

OVHcloud, a French cloud computing firm, recently stopped a record-breaking DDoS attack in April 2024. The attack reached 840 million packets per second, exceeding the previous record set in 2020. This attack utilized a combination of TCP ACK flood and DNS reflection methods. The frequency and intensity of DDoS attacks have been increasing since 2023, with daily attacks exceeding 1 Tbps. Vulnerabilities in routers like MikroTik CCR devices have been exploited to create powerful botnets for DDoS attacks. These incidents highlight the growing trend of exploiting outdated router vulnerabilities for high-intensity attacks, posing challenges for cybersecurity defenses. For more insights 👉 https://buff.ly/3XSuBnN #OVHcloud #DDoS #CyberSecurity #CyberAttacks #CloudComputing #TCPACKFlood #DNSReflection #RouterVulnerabilities #MikroTik #Botnets #CyberThreats #CyberDefense #NetworkSecurity

5

🔐Discover how to harness the full potential of GenAI without increasing the possible attack surface for cyber criminals to exploit. Understand the risks, responsible development, common threats, and mitigation techniques from Elastic Security Labs' LLM Safety Assessment Register now → https://gag.gl/Frt5Z0

1

🚨OpenProject: Misconfigured Tablesorter Enables Stored XSS Attacks in Cost Reports 🚨 In OpenProject a high severity vulnerability CVE-2024-35224 was detected. A project admin could exploit a bug in the Cost Report feature to insert harmful code. Updating to version 13.4.2, 14.0.2, or 14.1.0 resolves this vulnerability. Stay informed and learn how to protect your data by reading more about this vulnerability here: https://lnkd.in/dhExmwzW. #vulnerability #security #hossted

2

🚀 Is your organization prepared for NIS 2 compliance? Dive deep into essential insights with our webinar recording: "NIS 2 Enforcement – Get your DNS Ready!" Join Yaelle Harel & Alexandre Chauvin-Hameau to fortify your defenses. Watch Webinar recording: https://ow.ly/fV9c50S87lh #NIS2 #NIS #DataProtection #ConsumerPrivacy #CyberSecurity #DNSsecurity

8

In just 24 hours, imagine having a unified dashboard of your entire identity landscape, revealing hidden pathways to privilege and high risk accounts. As a transformative addition to the BeyondTrust platform, Identity Security Insights provides an advanced intelligence layer that empowers organizations to achieve new levels of identity and access security. We're talking about: 🎯 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗧𝗵𝗿𝗲𝗮𝘁 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻: ranked by severity with proactive responses ✔️ 𝗥𝗲𝗱𝘂𝗰𝗲𝗱 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗔𝘁𝘁𝗮𝗰𝗸 𝗦𝘂𝗿𝗳𝗮𝗰𝗲: pin point blind spots & mitigate risks 🧩 𝗜𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗲𝗱 𝗘𝗰𝗼𝘀𝘆𝘀𝘁𝗲𝗺: utilize existing intel from BeyondTrust products 🕒 𝗗𝗲𝗹𝗶𝘃𝗲𝗿𝘀 𝗜𝗻𝘀𝘁𝗮𝗻𝘁 𝗩𝗮𝗹𝘂𝗲: actionable findings delivered in just 30 𝘮𝘪𝘯𝘶𝘵𝘦𝘴 Identity Security Insights 𝘤𝘰𝘮𝘱𝘭𝘦𝘵𝘦𝘭𝘺 𝘳𝘦𝘷𝘰𝘭𝘶𝘵𝘪𝘰𝘯𝘪𝘻𝘦𝘴 the way organizations approach identity security, providing an unprecedented level of visibility, threat detection, and actionable insights that hasn’t been available to date. Find out more today and request a complimentary identity security assessment with 30 days of threat monitoring included for your environment. https://lnkd.in/eHe3rz3T #IdentitySecurityInsights #IdentitySecurity #BeyondTrust #Cybersecurity

9

The future of DNS protection is here with OpenText's DNS Leak Prevention technology! This innovative solution shuts down rogue DNS requests, keeping businesses safe from potential attacks. Don't just hear about it; experience it for yourself. Request a demo today! #OpenTextCybersecurity #Webroot #DNSLeakPrevention #Cybersecurity

1

☁ 💪 Cloud security threats are increasing, creating more demand for solutions like Cloud Security Posture Management (#CSPM) and Cloud-Native Application Protection Platform (#CNAPP). Our latest ETR Observatory delves into these critical tools. ☁ 💪 Review and download the Observatory for CSPM and CNAPP to gain insights into the vendors offering solutions within this space and learn which products respondents gravitate to most. https://lnkd.in/egupinnB Wiz CrowdStrike Zscaler Palo Alto Networks SentinelOne

12

Figuring out what you have should be the initial step toward a successful API security program. However, with the growing proliferation of APIs, it might be challenging. Last week, we hosted Antoine Carossio, Bill Doerrfeld ,and Erik Wilde for a fireside chat on API sprawl. Together, we explored the key factors contributing to API sprawl, examined its causes, and discussed its implications. If you're trying to wrap your head around how to manage all the APIs within your organization, this conversation will definitely provide valuable insights 😉 Watch it here 👇

10

Our Varonis Threat Labs team discovered two techniques in SharePoint that allow users to avoid triggering download events while exfiltrating files. Dive deeper into the findings, including how the two techniques work and a full action plan for your security team! ⬇️

10

📣 Rackslab has just released Fatbuildr v2.1.0, the latest version of the advanced open source continuous build and delivery solution! This new version notably includes the following new features: - Support of tasks hooks to trigger actions (eg. notifications, synchronization) when tasks start and finish. - Support of many container and disk images formats, including squashfs, qcow2, raw images with GPT partitions (thanks to mkosi 22). - Get artifacts sizes and browse RPM/Deb packages content directly in the web interface. - Native file listing of registries in the web interface. - Possibility to define format and distribution specific dependencies in prescripts. - Support installation of DNF modules in RPM build environments. In our long-term commitment for reliability and stability, this release also includes many bug fixes and internal improvements. This is one more big step towards the most powerful and reliable open source continuous software delivery solution! Packages are available for easy installation on many Linux distributions including: - RHEL8 - RHEL9 - Debian 12 stable « bookworm » - Debian 13 testing « trixie » - Debian unstable « sid » - Ubuntu 22.04 LTS « jammy » - Ubuntu 24.04 LTS « noble » - Fedora core 39 - Fedora core 40 https://lnkd.in/eXgvFsh6 #opensource #software #delivery #cicd #build #rpm #deb #packages #containers

3